gpp_maybe Security update for the linux kernel (live patch 14 for sle 15 sp4)

SUSE-SLE-Module-Live-Patching-15-SP4-2024-1289

This update for the Linux Kernel 5.14.21-150400_24_69 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1218613). - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219432). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

• Release Date
  Apr 15 2024
• References
  Bugzilla: 1218613, 1219078, 1219296, 1219432
  CVEs: CVE-2023-42753, CVE-2023-52340, CVE-2024-0565, CVE-2024-1085
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.4 s390x

• Packages
  kernel-livepatch-5_14_21-150400_24_69-default
  Kernel live patch module

  9-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_14
  Kernel live patch module

  9-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 ppc64le

• Packages
  kernel-livepatch-5_14_21-150400_24_69-default
  Kernel live patch module

  9-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_14
  Kernel live patch module

  9-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 x86_64

• Packages
  kernel-livepatch-5_14_21-150400_24_69-default
  Kernel live patch module

  9-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_14
  Kernel live patch module

  9-150400.2.1 lock src